Design identity, governance and monitoring solutions
Practise only this domain. 50 questions with explanations, 20 at a time.
Start this domainSample questions
- A platform team wants to stop engineers from creating oversized virtual machines in the production subscriptions, no matter which deployment tool they use. Which mechanism should the team apply?Easy
- A security team must receive a notification whenever an administrator activates an eligible Microsoft Entra directory role, so the activation can be reviewed promptly. Which capability should the team configure?Medium
- A company wants administrators to face a second verification step only when they sign in to the Azure portal from networks outside the head office. Sign-ins from the office should not be challenged. Which Conditional Access setting should be scoped to the office addresses?Hard
- A governance team must confirm that every VM in the production subscriptions has a required endpoint protection extension and an encrypted OS disk. Non-compliant VMs should be surfaced automatically, and the missing extension should be installable through a remediation task. Which mechanism is correct?Medium